Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa
File: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (raw, json)
Hash identifier: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=
Subject key identifier: 43:1F:C9:EE:39:8E:F4:50:39:A2:DF:6C:2E:94:C3:BB:81:4B:32:E9
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8AD1118DE9D0B6803E44757CE36C
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41803
IP address blocks: 194.12.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:d1:11:8d:e9:d0:b6:80:3e:44:75:7c:e3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431fc9ee398ef45039a2df6c2e94c3bb814b32e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:b6:94:2b:27:30:2f:9b:a7:d6:be:61:a4:
b0:f1:b0:98:19:9b:64:21:66:6f:35:e9:74:a7:73:
96:dc:0f:4f:2b:46:2d:b5:6d:fa:9a:00:ca:5a:2d:
7f:0f:47:6d:dc:ad:8c:43:80:53:ee:50:7a:dc:16:
f0:52:73:8d:04:5b:02:d5:be:17:03:48:8e:23:bf:
d7:dd:f0:e3:d2:c9:ec:1b:35:a9:9f:9e:89:f7:39:
72:62:6f:99:ca:eb:da:fc:4e:be:3b:26:2c:13:5d:
e5:ba:17:d7:ed:21:6a:70:64:b1:aa:29:98:ee:ad:
1c:e2:20:33:5c:85:96:ba:2a:de:2b:1b:a6:a5:f5:
c7:31:06:96:b2:df:f3:82:13:82:1b:ee:0f:44:75:
05:08:72:f7:1d:bd:4f:9a:25:41:8d:39:a6:d9:3c:
27:ea:88:17:32:4a:b4:3b:23:71:2b:f8:7a:57:78:
85:f5:19:78:0c:10:d0:8d:5e:ff:b2:4d:f1:99:ab:
52:73:cc:89:6a:ae:78:3d:06:a9:b6:f4:53:a8:bb:
0b:50:c5:a8:74:95:40:7e:2e:f5:c8:d7:79:c5:1e:
5b:7f:5e:05:c0:c6:13:e9:ad:d1:d7:1d:64:58:ab:
7d:5b:92:f7:d8:a6:27:f2:bb:a7:ac:52:f2:27:8c:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:C9:EE:39:8E:F4:50:39:A2:DF:6C:2E:94:C3:BB:81:4B:32:E9
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.247.0/24
Signature Algorithm: sha256WithRSAEncryption
72:43:a4:c1:2f:ea:c3:47:bc:54:16:75:31:bc:80:f9:94:9c:
6f:7d:a9:5c:33:d0:c4:bd:7a:33:47:7f:5c:2c:2c:2a:f7:8c:
a9:8e:0f:78:3d:70:2c:31:90:f8:50:17:36:15:e0:06:7d:5a:
19:11:61:b8:e2:34:47:f9:4e:7c:f5:b2:1d:fa:18:c4:30:ef:
83:16:75:46:6b:6c:b7:88:36:9f:c9:bf:40:e4:85:91:a9:99:
68:76:77:53:f8:88:92:9f:4f:3b:98:93:1e:10:29:fc:2b:25:
97:d3:48:3a:b1:b2:66:56:da:eb:4a:17:fd:8c:ea:08:25:01:
d8:0f:c3:25:38:cd:31:3e:91:05:2a:23:b8:66:24:a0:46:40:
be:5c:9c:da:f7:14:9d:3f:cc:10:81:fb:b7:ba:0d:e8:76:7c:
42:1d:a8:66:e1:1b:d6:92:6a:e7:82:c3:7c:8a:57:6f:40:5f:
d6:7b:a5:c9:86:4f:f5:f2:67:a5:61:13:70:33:c5:7f:35:b4:
c5:ac:48:bb:0b:e5:df:3a:8c:43:4c:3e:5a:49:fc:4f:6e:aa:
00:d8:0c:4d:9c:ff:27:e9:dd:60:eb:d6:da:7e:16:81:92:88:
11:96:14:52:0f:48:c0:06:3a:de:f8:4e:65:37:c9:45:b9:b7:
61:20:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:53 2025 by rpki-client